Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07f9be5b-01f8-3367-89be-ea49b01166a6.roa
File: 07f9be5b-01f8-3367-89be-ea49b01166a6.roa (raw, json)
Hash identifier: y5NJkr0UDdZzm/edtGB41njBWajnEO1FGeKz+bityow=
Subject key identifier: FF:40:9F:28:D2:BF:26:80:57:DA:5E:8E:DC:29:9A:B0:8B:24:03:04
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB79AF7478B55759DE8B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07f9be5b-01f8-3367-89be-ea49b01166a6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 22394
IP address blocks: 70.192.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:79:af:74:78:b5:57:59:de:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=33dc0f3c-f066-4bf1-a72e-e89404c94dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:0e:2c:23:58:40:76:9e:e1:71:72:75:9b:
81:c4:28:df:1f:bf:3d:a8:60:b5:92:75:d8:5e:cc:
52:7b:85:e2:03:15:bb:bb:1a:d9:0a:80:01:70:d7:
c9:fd:eb:95:ad:43:2b:76:8a:5b:bf:11:55:dc:cc:
2d:a8:b8:85:f4:95:9e:d8:55:cb:92:99:5e:05:86:
bc:46:f7:f2:bf:68:0a:86:a2:38:99:93:1f:a6:d6:
93:2f:9c:75:83:17:f3:eb:57:45:25:56:d5:27:69:
aa:45:49:c4:b8:43:b4:42:46:43:1f:24:27:55:31:
2b:d9:98:6f:5a:f2:0c:11:b3:fd:3f:23:3f:22:52:
64:d1:58:6e:9a:91:67:43:13:04:bd:c5:fc:27:c0:
0c:6e:09:63:a4:11:b4:78:cb:69:1e:48:69:5a:dd:
f4:6e:f3:05:93:31:ef:32:f1:19:5e:d0:6c:e7:06:
fa:fc:05:0e:d6:db:1e:b7:99:dc:19:d6:48:6a:70:
d7:83:52:6a:10:b2:75:c3:5e:e6:b9:09:aa:1e:29:
6c:b0:d0:18:01:0c:0f:d9:55:6e:1d:30:84:ac:e9:
9b:bb:79:c5:c7:55:65:ec:f5:76:b7:ae:6a:38:91:
9e:9c:4b:35:40:af:d0:4a:a9:75:8e:c2:ff:7c:08:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:9F:28:D2:BF:26:80:57:DA:5E:8E:DC:29:9A:B0:8B:24:03:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07f9be5b-01f8-3367-89be-ea49b01166a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.192.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a2:bf:bc:03:4c:47:6a:c9:51:a9:1a:92:3b:41:0e:3e:b1:
09:13:c1:8b:7f:26:08:26:27:cf:3a:3c:a4:5f:ed:fa:fb:e1:
7a:30:f6:b3:16:1a:18:09:1d:34:26:97:68:3c:12:83:0b:a2:
e3:c3:59:74:f5:cf:79:5e:0f:66:f0:15:e2:97:bf:03:87:ec:
50:3c:10:0f:f7:84:42:f3:4a:4e:e4:6e:a0:ea:b1:51:24:8e:
03:29:83:cc:9c:49:07:8f:6f:68:ba:f8:81:c9:2c:ff:14:79:
e3:f0:50:72:14:56:ce:eb:c7:7f:66:23:a1:1e:ca:6b:83:2c:
1c:7c:b3:b9:49:5d:de:a1:45:0c:6d:42:bd:01:e4:3a:ea:00:
f1:e4:a7:ec:c6:d0:79:b6:78:ce:84:5d:0d:52:71:e1:df:d6:
f3:53:48:84:fc:3a:34:a3:8c:a3:d6:60:7a:93:61:34:48:b0:
b6:ff:c8:f5:3d:16:aa:25:41:42:0e:76:b1:f0:6b:96:f8:7b:
e5:d3:c4:a6:77:30:1a:bc:c5:d8:92:f7:68:6e:fe:7e:08:eb:
45:24:90:3f:40:e8:fc:19:40:8e:8c:b0:74:a0:8a:f4:9e:5a:
34:e0:b8:35:03:ee:a4:a0:5f:e9:3d:5d:e6:82:1c:ec:7e:c9:
54:63:47:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEh863mvdHi1V1neiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzNkYzBmM2MtZjA2Ni00YmYxLWE3MmUtZTg5NDA0Yzk0ZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/QOLCNYQHae4XFydZuBxCjfH789qGC1knXY
XsxSe4XiAxW7uxrZCoABcNfJ/euVrUMrdopbvxFV3MwtqLiF9JWe2FXLkpleBYa8
Rvfyv2gKhqI4mZMfptaTL5x1gxfz61dFJVbVJ2mqRUnEuEO0QkZDHyQnVTEr2Zhv
WvIMEbP9PyM/IlJk0VhumpFnQxMEvcX8J8AMbgljpBG0eMtpHkhpWt30bvMFkzHv
MvEZXtBs5wb6/AUO1tset5ncGdZIanDXg1JqELJ1w17muQmqHilssNAYAQwP2VVu
HTCErOmbu3nFx1Vl7PV2t65qOJGenEs1QK/QSql1jsL/fAh2XQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP9AnyjSvyaAV9pejtwpmrCLJAMEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDdmOWJlNWItMDFmOC0z
MzY3LTg5YmUtZWE0OWIwMTE2NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFRsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOKK/vANMR2rJUakakjtBDj6xCRPBi38mCCYnzzo8pF/t+vvhejD2sxYa
GAkdNCaXaDwSgwui48NZdPXPeV4PZvAV4pe/A4fsUDwQD/eEQvNKTuRuoOqxUSSO
AymDzJxJB49vaLr4gcks/xR54/BQchRWzuvHf2YjoR7Ka4MsHHyzuUld3qFFDG1C
vQHkOuoA8eSn7MbQebZ4zoRdDVJx4d/W81NIhPw6NKOMo9ZgepNhNEiwtv/I9T0W
qiVBQg52sfBrlvh75dPEpncwGrzF2JL3aG7+fgjrRSSQP0Do/BlAjoywdKCK9J5a
NOC4NQPupKBf6T1d5oIc7H7JVGNHKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:55 2025 by rpki-client